Lucene search
K

9 matches found

NVD
NVD
added 2026/01/25 1:15 p.m.2 views

CVE-2020-36931

Click2Magic 1.1.5 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts in the chat name input. Attackers can craft a malicious payload in the chat name to capture administrator cookies when the admin processes user requests...

6.4CVSS0.00017EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/01/25 12:24 p.m.2 views

CVE-2020-36931 Click2Magic 1.1.5 - Stored Cross-Site Scripting

Click2Magic 1.1.5 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts in the chat name input. Attackers can craft a malicious payload in the chat name to capture administrator cookies when the admin processes user requests...

6.4CVSS5.8AI score0.00017EPSS
Exploits0References4
EUVD
EUVD
added 2026/01/25 12:24 p.m.2 views

EUVD-2026-4632

Click2Magic 1.1.5 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts in the chat name input. Attackers can craft a malicious payload in the chat name to capture administrator cookies when the admin processes user requests...

6.4CVSS5AI score0.00017EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/01/25 12:24 p.m.1 views

CVE-2020-36931

Click2Magic 1.1.5 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts in the chat name input. Attackers can craft a malicious payload in the chat name to capture administrator cookies when the admin processes user requests...

6.4CVSS5.8AI score0.00017EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/01/25 12:24 p.m.29 views

CVE-2020-36931 Click2Magic 1.1.5 - Stored Cross-Site Scripting

Click2Magic 1.1.5 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts in the chat name input. Attackers can craft a malicious payload in the chat name to capture administrator cookies when the admin processes user requests...

6.4CVSS0.00017EPSS
Exploits0References4
CVE
CVE
added 2026/01/25 12:24 p.m.4 views

CVE-2020-36931

Click2Magic 1.1.5 is affected by a stored cross-site scripting vulnerability in the chat name input. The condition allows attackers to inject scripts that can capture administrator cookies when the admin processes user requests. Reported CVSS details indicate Medium severity (CVSSv4 = 5.1; CVSSv3...

6.4CVSS5AI score0.00017EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/01/25 12:0 a.m.1 views

Click2Magic Cross-Site Script Vulnerabilities

Click2Magic is an intelligent customer communication platform developed by Click2Magic Corporation. Version 1.1.5 of Click2Magic contains a cross-site scripting vulnerability. This vulnerability arises from improper cleaning of chat message inputs, which may lead to storage-based cross-site...

6.4CVSS5.6AI score0.00017EPSS
Exploits0References4
Packet Storm
Packet Storm
added 2021/01/05 12:0 a.m.244 views

Click2Magic 1.1.5 Cross Site Scripting

Exploit Title: Click2Magic 1.1.5 - Stored Cross-Site Scripting Exploit Author: Shivam Vermacyb3rn3rd Date: 2020-12-25 Google Dork: N/A Vendor Homepage: https://www.click2magic.com/user/agent/index Software Link: https://www.click2magic.com Version: 1.1.5 Category: Web Application Tested on: Kali...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2021/01/04 12:0 a.m.178 views

Click2Magic 1.1.5 - Stored Cross-Site Scripting

Exploit Title: Click2Magic 1.1.5 - Stored Cross-Site Scripting Exploit Author: Shivam Vermacyb3rn3rd Date: 2020-12-25 Google Dork: N/A Vendor Homepage: https://www.click2magic.com/user/agent/index Software Link: https://www.click2magic.com Version: 1.1.5 Category: Web Application Tested on: Kali...

7.4AI score
Exploits0
Rows per page
Query Builder